Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8cda8a9a-d45d-32a4-b7fb-097cdaad479f.roa
File:                     8cda8a9a-d45d-32a4-b7fb-097cdaad479f.roa (raw, json)
Hash identifier:          8CZ3RIKSzK2BDHX1bYRn/1A4vvEnPEY2Efmee/tIp9M=
Subject key identifier:   F4:37:88:2E:52:CF:86:AB:E2:17:61:C5:D1:4A:D6:91:87:88:9B:D7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59EA91D6DF7C90B997B300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8cda8a9a-d45d-32a4-b7fb-097cdaad479f.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397218
IP address blocks:        156.154.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:ea:91:d6:df:7c:90:b9:97:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=9da4aa72-9b70-475e-8263-36b21eefdaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9a:66:87:bf:4f:3e:f0:bf:fb:1d:35:76:ae:
                    ea:4c:a7:14:36:c0:5e:b8:13:4c:6d:b4:9d:e9:f8:
                    16:6f:6b:1b:f3:49:4d:12:a5:a8:4c:19:45:db:8b:
                    7a:35:84:58:18:de:98:07:dc:d7:12:19:f6:e6:13:
                    32:7d:91:04:9c:ea:56:29:96:03:52:d5:c1:0e:b5:
                    bc:f9:81:e5:75:4b:08:11:7c:57:c4:d4:24:cc:c9:
                    d4:73:af:ca:72:35:17:1d:1f:66:b4:83:68:41:54:
                    3a:4f:da:5e:e4:68:12:49:b7:12:cd:50:46:80:72:
                    8b:99:a4:45:ca:88:fc:98:25:fd:1b:5e:d7:6d:8e:
                    e3:5d:08:67:69:d6:ab:48:47:b3:43:80:d2:08:b8:
                    13:dc:30:76:de:9e:40:1d:33:5f:83:31:46:9e:5f:
                    f9:54:53:25:16:55:7b:f3:17:8c:95:6d:a8:5d:91:
                    4c:f6:e2:a0:bd:10:da:b9:a0:e4:9e:d1:28:3b:8c:
                    72:93:31:5f:e6:db:91:45:d0:b2:93:83:0e:e9:8d:
                    64:93:57:91:1d:00:cc:d3:e1:fe:e8:5f:67:17:3e:
                    dc:0a:ca:7b:57:9e:a7:a6:f8:ee:82:56:43:69:4b:
                    2b:34:38:af:aa:23:b5:74:ab:48:41:b7:b2:5c:05:
                    db:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:37:88:2E:52:CF:86:AB:E2:17:61:C5:D1:4A:D6:91:87:88:9B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8cda8a9a-d45d-32a4-b7fb-097cdaad479f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:3c:2a:a4:d6:ca:18:93:89:43:ed:f8:06:1a:22:96:44:de:
         35:8f:7d:7a:72:c0:8f:ae:9c:3e:e6:bd:3e:88:4b:0b:6a:58:
         b7:58:77:46:9e:aa:3e:09:44:3c:60:66:c3:d1:2f:6c:4a:34:
         75:a4:d3:b5:bf:67:fc:c3:2a:23:a6:ba:36:0f:6b:7f:ab:ea:
         03:16:5c:de:b9:e0:df:80:5c:8b:fb:ea:d2:8d:2b:1a:6a:69:
         96:b9:f8:71:17:41:14:c7:ba:59:cc:7c:a5:49:ba:b4:03:1d:
         32:4f:aa:75:76:28:e3:44:22:9e:72:79:dd:0a:c0:eb:66:88:
         15:ec:73:58:ab:e8:2f:ac:d9:2d:95:bd:02:b1:da:b3:f1:7b:
         23:d9:30:3c:fa:8d:31:e1:b2:17:f6:36:f7:56:ae:43:cc:94:
         fc:c4:f5:60:a4:65:32:84:71:b5:06:e7:54:f4:03:f5:ea:4b:
         ac:2d:76:a5:c3:4e:a5:22:d0:6f:fc:da:ab:dd:e2:43:fe:77:
         a2:f9:91:85:6d:9f:3d:d8:ff:84:ae:ac:36:6d:7c:51:a8:05:
         be:e2:2b:c6:3e:76:15:4a:79:d8:9e:b1:95:29:36:e2:5f:69:
         3f:99:70:49:23:55:ae:96:94:f9:8c:1f:42:10:f9:7c:24:20:
         c8:98:a3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:52:09 2025 by rpki-client